|
| 1 | +### YamlMime:TSTypeAlias |
| 2 | +name: AuthorizationUrlRequest |
| 3 | +uid: '@azure/msal-node.AuthorizationUrlRequest' |
| 4 | +package: '@azure/msal-node' |
| 5 | +summary: >- |
| 6 | + Request object passed by user to retrieve a Code from the server (first leg of |
| 7 | + authorization code grant flow) |
| 8 | +
|
| 9 | + - scopes - Array of scopes the application is requesting |
| 10 | + access to. |
| 11 | +
|
| 12 | + - claims - A stringified claims request which will be |
| 13 | + added to all /authorize and /token calls |
| 14 | +
|
| 15 | + - authority - Url of the authority which the application |
| 16 | + acquires tokens from. |
| 17 | +
|
| 18 | + - correlationId - Unique GUID set per request to trace a request |
| 19 | + end-to-end for telemetry purposes. |
| 20 | +
|
| 21 | + - redirectUri - The redirect URI where authentication responses |
| 22 | + can be received by your application. It must exactly match one of the redirect |
| 23 | + URIs registered in the Azure portal. |
| 24 | +
|
| 25 | + - extraScopesToConsent - Scopes for a different resource when the user |
| 26 | + needs consent upfront. |
| 27 | +
|
| 28 | + - responseMode - Specifies the method that should be used to |
| 29 | + send the authentication result to your app. Can be query, form_post, or |
| 30 | + fragment. If no value is passed in, it defaults to query. |
| 31 | +
|
| 32 | + - codeChallenge - Used to secure authorization code grant via |
| 33 | + Proof of Key for Code Exchange (PKCE). For more information, see the PKCE |
| 34 | + RCF:https://tools.ietf.org/html/rfc7636 |
| 35 | +
|
| 36 | + - codeChallengeMethod - The method used to encode the code verifier for |
| 37 | + the code challenge parameter. Can be "plain" or "S256". If excluded, code |
| 38 | + challenge is assumed to be plaintext. For more information, see the PKCE RCF: |
| 39 | + https://tools.ietf.org/html/rfc7636 |
| 40 | +
|
| 41 | + - state - A value included in the request that is also |
| 42 | + returned in the token response. A randomly generated unique value is typically |
| 43 | + used for preventing cross site request forgery attacks. The state is also used |
| 44 | + to encode information about the user's state in the app before the |
| 45 | + authentication request occurred. |
| 46 | +
|
| 47 | + - prompt - Indicates the type of user interaction that is |
| 48 | + required. |
| 49 | + login: will force the user to enter their credentials on that request, negating single-sign on |
| 50 | + none: will ensure that the user isn't presented with any interactive prompt. if request can't be completed via single-sign on, the endpoint will return an interaction_required error |
| 51 | + consent: will the trigger the OAuth consent dialog after the user signs in, asking the user to grant permissions to the app |
| 52 | + select_account: will interrupt single sign-=on providing account selection experience listing all the accounts in session or any remembered accounts or an option to choose to use a different account |
| 53 | + create: will direct the user to the account creation experience instead of the log in experience |
| 54 | + - account - AccountInfo obtained from a getAccount API. |
| 55 | + Will be used in certain scenarios to generate login_hint if both loginHint and |
| 56 | + sid params are not provided. |
| 57 | +
|
| 58 | + - loginHint - Can be used to pre-fill the username/email |
| 59 | + address field of the sign-in page for the user, if you know the username/email |
| 60 | + address ahead of time. Often apps use this parameter during re-authentication, |
| 61 | + having already extracted the username from a previous sign-in using the |
| 62 | + preferred_username claim. |
| 63 | +
|
| 64 | + - sid - Session ID, unique identifier for the session. |
| 65 | + Available as an optional claim on ID tokens. |
| 66 | +
|
| 67 | + - domainHint - Provides a hint about the tenant or ___domain that |
| 68 | + the user should use to sign in. The value of the ___domain hint is a registered |
| 69 | + ___domain for the tenant. |
| 70 | +
|
| 71 | + - extraQueryParameters - String to string map of custom query parameters |
| 72 | + added to the /authorize call |
| 73 | +
|
| 74 | + - tokenQueryParameters - String to string map of custom query parameters |
| 75 | + added to the /token call |
| 76 | +
|
| 77 | + - nonce - A value included in the request that is |
| 78 | + returned in the id token. A randomly generated unique value is typically used |
| 79 | + to mitigate replay attacks. |
| 80 | +fullName: AuthorizationUrlRequest |
| 81 | +remarks: '' |
| 82 | +isPreview: false |
| 83 | +isDeprecated: false |
| 84 | +syntax: | |
| 85 | + type AuthorizationUrlRequest = Partial< |
| 86 | + Omit< |
| 87 | + CommonAuthorizationUrlRequest, |
| 88 | + | "scopes" |
| 89 | + | "redirectUri" |
| 90 | + | "resourceRequestMethod" |
| 91 | + | "resourceRequestUri" |
| 92 | + | "authenticationScheme" |
| 93 | + | "requestedClaimsHash" |
| 94 | + > |
| 95 | + > & { redirectUri: string, scopes: Array<string> } |
0 commit comments